Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: a5xYH5XRgqbtBEESGPGEv157INGyjbTKzB3oTMsphUc=
Subject key identifier: F2:AB:80:3A:86:83:06:BE:28:51:12:76:C8:39:F4:1F:F9:EB:C5:D9
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 019CAA21E474A54714BC17CA10B63627CB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 059F
Signing time: Sun 01 Mar 2026 16:01:13 +0000
Manifest this update: Sun 01 Mar 2026 16:01:13 +0000
Manifest next update: Mon 02 Mar 2026 16:01:13 +0000
Files and hashes: 1: Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa (hash: xOQT8aF5alDLKyDZy7KGBBHerw/+VNesMI/Q2sx+T/E=)
2: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: WrqxzkysYX14/E/cuqnF4l+6cy9BtaZiaAHeksFlzeA=)
3: f6Gl5ia878MGtM32MXnrZU8aNMI.roa (hash: DY0u0e2tgwdLOC3jP4WK/B8b0MSVRVEFdP0Swwb6Kq0=)
4: s9H6P_An9Cs8KJ23K6jcUiaST5I.roa (hash: R6YBzLVPih79ie1zLN00BwSvjURpM3Xic3Nu8UvJvIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e4:74:a5:47:14:bc:17:ca:10:b6:36:27:cb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Mar 1 16:01:13 2026 GMT
Not After : Mar 2 16:01:13 2026 GMT
Subject: CN=f2ab803a868306be28511276c839f41ff9ebc5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:37:58:fc:a6:6d:b5:6d:b3:55:b8:ba:63:
66:3c:40:68:9a:0e:e3:f8:73:d4:f6:f4:76:f6:05:
49:b2:3e:ce:c0:f3:7d:bc:07:ce:07:45:20:d6:15:
ea:96:c9:4f:de:a6:d0:f0:75:67:10:58:4b:04:32:
5f:3e:c2:de:61:c3:a0:16:3e:03:db:93:a2:a6:c0:
47:b9:c5:22:31:d5:19:14:7c:38:f4:06:ac:0f:d6:
4d:01:d8:71:b7:32:cc:86:5d:2b:da:ff:46:5a:4b:
11:e2:a1:2e:dc:ef:48:00:7a:3b:3d:37:67:79:3b:
31:e0:1d:90:b4:4c:be:41:33:50:39:0a:a3:16:78:
ca:61:67:be:94:a5:e6:72:48:af:ce:b7:4d:da:f9:
42:1d:25:6d:b2:21:7b:41:d3:61:44:7f:44:ae:13:
c3:38:ab:ca:b5:ba:d0:8a:bc:8a:44:e6:1c:f3:d4:
90:43:a1:15:da:a9:a2:e5:37:79:06:2e:60:f4:2b:
e7:ac:b8:5e:96:d9:5f:a7:96:00:72:8d:79:2a:aa:
69:af:08:11:d2:83:c1:46:ae:ed:0f:e0:0c:99:dc:
89:58:94:3e:03:91:94:12:09:25:fa:99:5d:27:34:
29:23:09:1c:31:3c:9c:9d:5e:ff:cd:6a:15:7b:fd:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AB:80:3A:86:83:06:BE:28:51:12:76:C8:39:F4:1F:F9:EB:C5:D9
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:60:76:39:fd:10:33:bb:71:30:27:eb:96:f2:01:a8:64:bb:
58:27:21:79:07:a8:ad:2d:ce:9b:5e:e5:6b:6b:1f:cd:ea:62:
ad:85:f1:c9:c8:d3:e3:6b:21:6e:a8:c5:3e:dc:63:51:3f:21:
44:7c:fb:0e:80:f1:b9:3c:4d:f6:21:c7:6e:a5:45:8f:ba:64:
22:23:e3:a7:f3:f7:fb:e2:2c:2c:2d:e6:b0:46:55:b9:a0:e0:
90:b6:15:e8:0f:60:5f:16:28:c3:25:85:01:eb:de:69:33:bc:
a5:80:c2:fe:e4:f8:55:aa:f6:44:f7:5a:1a:0c:99:4e:2e:e2:
9d:dc:df:df:09:1a:ce:4f:c6:5f:27:2c:6a:d6:16:0e:69:50:
31:b9:4e:60:5b:cf:af:c9:53:79:8c:5b:97:6f:ec:a5:5a:c7:
36:83:44:a1:eb:16:09:23:5d:b2:18:47:99:e0:7c:eb:09:9c:
8c:2b:fe:41:46:31:98:4e:91:45:74:98:c8:f0:5a:70:b8:de:
cd:12:e2:fa:92:a0:23:c8:76:e0:2b:9b:9a:e5:24:a4:53:f0:
a6:0b:e6:60:b0:cb:1e:38:7c:19:09:53:d1:05:4e:61:f1:13:
71:02:f9:74:07:87:dd:6b:fa:4f:08:e3:ef:1a:ef:f8:9d:48:
a6:f9:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:20:24 2026 by rpki-client